Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Witcher

#40575of 53,608
6.5Total CVSS
Vulnerabilities · 1
PT-2023-30464
6.5
2023-09-04
Yonyou · Yongyou Ufida-Nc · CVE-2023-4748
**Name of the Vulnerable Software and Affected Versions** Yongyou UFIDA-NC versions up to 20230807 **Description** A critical issue has been found in the processing of the file PrintTemplateFileServlet.java, where the manipulation of the `filePath` argument leads to path traversal. This issue can be initiated remotely. **Recommendations** For versions up to 20230807, as a temporary workaround, consider restricting access to the PrintTemplateFileServlet.java file to minimize the risk of exploitation. Avoid using the `filePath` argument in the affected processing until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.